drop second WAN IP remote access
Posted: Tue Jun 09, 2020 7:46 pm
by rilliam
I have two WAN IPs and would like to disable winbox access on the second IP address. Can someone tell me how to do this?
Re: drop second WAN IP remote access
Posted: Tue Jun 09, 2020 7:55 pm
by Joni
Firewall?
Block input to second address and port?
https://wiki.mikrotik.com/wiki/Manual:IP/Services
Re: drop second WAN IP remote access
Posted: Tue Jun 09, 2020 8:06 pm
by anav
There are number of ways to limit access to the router via winbox.
First change default winbox port
LImite access to the router via INPUT Chain rules
Limit access to users to specific subnets or IPs
Limit macwinbox server to specific interfaces
Limit winbox access vie IP Services.
The more important question though is how are you accessing winbox right now using WANIP.
Assuming you are attempting to config the winbox while away from its location?
If so, winbox is not the safe and recommended method anyway.
Winbox inside a VPN tunnel is the right way to do this